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Abstract 

Two methods for constructing quantum LDPC codes are presented. 
We explain how to overcome the difficulty of finding a set of low weight 
generators for the stabilizer group of the code. Both approaches are based 
on some graph representation of the generators of the stabilizer group 
and on simple local rules that ensure commutativity. A message passing 
algorithm for generic quantum LDPC codes is also introduced. Finally, 
we provide two specific examples of quantum LDPC codes of rate 1/2 
obtained by our methods, together with a numerical simulation of their 
performance over the depolarizing channel. 



1 Introduction 

The idea of using quantum systems for processing information has been sug- 
gested by R. P. Fcynman as a potential way of bypassing the difficulty of simu- 
lating quantum physics with classical computers. Since then, it has developed 
into an exciting research area with implications ranging from cryptography (see 
e.g. |BB84al IEke91al ISPOOap to complexity theory (e.g. |Amb04al |Reg04a| ). 
For instance, quantum computers could solve efficiently some hard problems 
such as integer factorization |Sho94a| . or give quadratic speed-up over optimal 
classical algorithms, as it is the case for unsorted database search |Gro9 6a . 

However, for taking advantage of the quantum nature of physical systems 
to process information, it is necessary to protect them from unwanted evo- 
lutions. Indeed, if quantum registers are not protected from noise, the very 
fragile superpositions required for efficiently manipulating quantum informa- 
tion tend to disappear exponentially fast with the number of qubits involved. 
This effect — called decoherence — can nonetheless be reduced by using quan- 
tum error correcting codes. The first scheme of this kind has been proposed 
in 1995 by P. Shor j3ho95a], an d triggered numerous work on quantum er- 
ror correction. Most notable, was the introduction of the stabilizer formal- 
ism |Got97al |CRSS98a — for defining quantum codes and finding the gate 
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implementation of encoding and decoding circuits — together with the class of 
CSS codes |CS96allSte96a| . With these tools at hand, it has been shown that 
quantum information processing can be done fault-tolerantly (see for instance 
|AB97a) L i.e. would be feasible even in the presence of qubit errors and gate 
faults — provided these events are rare enough. 

In spite of these important results, properties of quantum codes are less un- 
derstood than those of for their classical counterparts. It is thus of interest to 
tackle the problem from a pragmatic point of view: devise versatile construc- 
tions of quantum codes inspired by the best classical codes, and analyze their 
performances. 

When sending classical information over memoryless classical channels, it has 
been demonstrated that a very efficient way for approaching the channel capacity 
is obtained by using LDPC codes with Gallager's iterative decoding algorithm. 
Generalizing these notions to quantum codes seems a promising way, and has 
indeed been proposed recently [MMM04a. . In this work, D. J. C. MacKay 
et al. have shown how to construct sparse weakly self-dual binary codes that 
can be used to construct quantum LDPC codes using Calderbank-Shor-Steane's 
method. 

Our work is aimed at finding other constructions of quantum LDPC codes 
within the stabilizer formalism. While a brief introduction to stabilizer codes 
is provided below, we would like to pinpoint here the main difficulty for finding 
LDPC stabilizer codes. As explained in [CRSS98aj, each stabilizer code can be 
viewed as a code over F4, the field with four elements. However, the converse 
is not true: to correspond to valid stabilizer codes, these codes must be self- 
orthogonal for some Hermitian trace inner product. Fulfillment of this peculiar 
constraint makes usual constructions of LDPC codes useless in the quantum 
setting. Our work provides a partial solution to this problem by defining such 
codes through simple group theoretical constructions (see Sections 13.21 and 13.31) . 
The resulting codes can be viewed as quantum analogs of regular Gallager codes: 
each qubit is involved in the same number of parity-check equations, and each 
parity-check equation involves the same number of qubits. Error estimation has 
been performed by an iterative algorithm applied to a Tanner graph associated 
to our constructions. The results of these numerical simulations are presented 
in Section 2] 

2 Stabilizer codes 

The code subspace. An (n, k) quantum code is a subspace of dimension 2 k 
of the Hilbert space H n = (C 2 )®" of n qubits. Such subspace allows to encode 
k qubits, so that the rate of an (n,k) quantum code is -. While defining the 
code subspace can be done in many different ways, a particularly useful method 
is known as the stabilizer formalism. 

The definition of stabilizer codes relics heavily on properties of Pauli matrices 
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for one qubit, i.e. acting on Hi - . 



Ho °)- x -(° °)- y =(° ?)•*-(; -°o- 

In particular, these matrices square to the identity; they generate a finite mul- 
tiplicative group Qi ; and any pair (P,Q) of elements in Gi either commutes 
(PQ -QP = 0) or anti-commutes (PQ + QP = 0). 

By extension, the Pauli group Q n over n-qubits is the multiplicative group 
generated by all possible tensor products of Pauli matrices over n qubits, i.e. 
elements of the form Pi ® P2 ® . . . <8> P n where the Pi's belong to Q\. As in 
the case of the Pauli group of a single qubit, any pair of elements in Q n either 
commutes or anti-commutes. 

The code subspace C of a (n, k) stabilizer code is defined as the largest 
subspace of 7i n stabilized by the action of a subgroup S of Q„ . For C to be 
of dimension 2 k , it requires S to be an Abelian subgroup generated by n — k 
independent elements Mi, and such that —J®" ^ S. That is, the code subspace 
is defined as, 

|V) eC^Vj, Mi|V) = IV). 

Error estimation. Before explaining how errors can be estimated, we must 
first define what the possible errors arc. It is well known that the most general 
transformation on n qubits allowed by quantum mechanics is a completely pos- 
itive trace preserving map. However, as shown in BDSW96a EM96a KL97a , 
it is sufficient to consider errors as elements of Q n since any admissible quantum 
operation can be written in Kraus form using only elements of the Pauli group 
over n qubits. 

Thus, let E € Q n be an error on the qubits of a (n, k) stabilizer code with 
stabilizer group S = (Afi)£lj • For each i, E and Mi either commute or anti- 
commute. Hence, for \ip) € C, either MiE\ip) = E\ip) or MiE\ip) = -E\ijj). The 
action of E on C is either to map C onto itself, or to map C onto an orthog- 
onal subspace of 7i n - Thus, the measurement associated to the Mj's reveals 
onto which orthogonal subspace C has been mapped: the n — k dimensional bi- 
nary vector s(E) = (si(E), . . .,s n - k (E)), such that (-1) S *( B ) = (ifj\E^ M,E\iJj), 
characterizes EC, and is called the syndrome of E. 

Also note that not all errors E with s{E) = (0, ... ,0) are harmful. Indeed 
if E g <S, then V|V) £ C, we have E\ip) = \ip), and quantum information is 
preserved. Only errors with non-trivial action on C harm quantum information. 
These errors E are by definition elements of N(S) — S, where N(S) is the 
normalizcr of S. 

A generic error estimation procedure then consists in finding E 6 Q n given 
the error model for the n qubits and the syndrome s(E) such that E?E G S. 
Such E is called the estimated error. The most common error model considered 
in the literature is the depolarizing channel where X, Y and Z errors occur 
each with probability p/3 < 1/4, and independently on each qubit. Usually, 
the estimated error is chosen accordingly to the maximum likelihood criterion 
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which is equivalent to choosing for E the lowest weight element of Q n such that 
s(E) = s(E). The error recovery will be successful when E'E £ S, otherwise a 
block error is produced. 



Quantum codes as codes over F4. Stabilizer codes might also be viewed 
as codes over F4 = {0, 1, ui, ui}, with 1 + uj + uj 2 = 1 + uj + Cu = . This duality 
is due to the additive structure of F4 which echoes the multiplicative structure 
of the Pauli operators I,X,Y,Z. The mapping between one and the other is 
the following: / <-> 0, X ^ uj, Z ^ Co and Y <-> 1. In addition, with the trace 
operation tr(x) = x + x = x + x 2 ,it can be checked that tr(a&) is iff the Pauli 
operators associated to a and b commute and 1 iff they anti-commute. This 
motivates the definition of the following inner product over F™ : 



The generators of a stabilizer code, when expressed as row- vectors of F 4 \ 
form a matrix M which will be called a parity-check matrix of the stabilizer 
code. In what follows, both the z-th generator defining the stabilizer code and 
its expression as the i-th row of M are denoted by Mj. These rows are orthogonal 
with respect to the inner product defined above. The converse is also true: any 
(n — k) x n matrix over F4 with orthogonal rows defines a stabilizer code over 
n qubits. 

While stabilizer codes were originally introduced using the language of the 
Pauli group, we will mainly employ the F4 formalism. This choice simplifies 
the notation, and better points out analogies and differences in construct- 
ing classical and quantum LDPC codes. Interested readers are redirected to 
|Got97al ERSS98a for a more complete treatment of stabilizer codes such as 
gate implementation and additional connections between stabilizer codes and 
codes over F4. 

3 Constructing regular quantum LDPC codes 

According to the definition of a parity-check matrix for stabilizer codes, it is 
natural to introduce quantum LDPC codes as stabilizer codes with sparse parity- 
check matrix: 

Definition 1. An (a,b)-regular quantum LDPC code is a stabilizer code whose 
parity-check matrix M has "a" non-zero entries per column and "b" non-zero 
entries per row. 

In the rest of this article we are going to construct and analyze some (a, b)- 
regular LDPC codes. 



n 




i = l 
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3.1 Iterative error estimation for quantum LDPC codes 



To define the iterative error estimation algorithm we use the following Tanner 
graph associated to a parity check matrix M. It is a bipartite graph with vertex 
set V U W. The vertices of V are associated to qubits of the code (i.e. columns 
of M) and vertices of W to the generators of the stabilizer code (i.e. rows of 
M). There is an edge between v <G V and w G W iff the corresponding entry 
M wv in M is non zero. We label this edge with the entry M wv . The purpose 
of the iterative error estimation algorithm is to find the most likely value for 
each Ei such that E = (E\, . . . , E n ) is compatible with the observed syndrome 
s{E) = (si(E)) , l~^ . The local constraint on E associated to the j-th check node 
(i.e. vertices in W) is given by the equation < E,Mj >= Sj(E). 

This graph is nothing but the syndrome version of a Tanner graph. The 
algorithms we can use to estimate errors are the SUM-PRODUCT or the MIN- 
SUM algorithms in their syndrome decoding form applied to this graph. That 
is, the version of these algorithms which estimates the most likely value of the 
error for each qubit given the observed syndrome. Note that iterative decoding 
of classical codes estimates instead the most likely value of the codeword symbols 
for each bit of the code. 

3.2 Generic construction of (a, fe)-regular quantum LDPC 



In order to construct quantum LDPC codes we restrict our attention to codes 
having a parity check matrix M with two kinds of non zero entries, w and w. 

Wc start our construction by choosing a group G with cardinality equal to 
a multiple of the length of the code we are interested in. Then wc choose two 
subgroups H and K of G, with |K| > |H|. The cosets xH are associated to qubits 
whereas the cosets yK are associated to rows of the parity-check matrix. In 
other words the length n and the number of rows n — k in the parity check 
matrix are given by 



We then pick a set of generators G of G that can be partitioned into two sets 
G = G u U Gq such that the following properties are satisfied: 



Wc put an edge between coset xW and coset yK iff there exists g G G such 
that xgH n yK ^ 0, or equivalcntly iff there exist h G H, k G K such that 
y = xghk. We label this edge with a to if the corresponding g belongs to 
G^ and with a uj otherwise. It can be checked that the degree of any vertex 
.xH is equal to a = |G||H|/|H n K| and the degree of any vertex yK is equal to 
b= |Gr||K|/|H H K|. This is a simple consequence of the following lemma: 



codes 



(GJ) 1 — G w , (Gq) 1 — Gq 

V(5 w ,cto) eG u x Gq, g^g = g^g^ 

g, g' GG, h, ti G H, k, k' G K, ghk = g'h'k' 




(1) 
(2) 
(3) 
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Figure 1: Subgraph induced by the qubit xH and the two check-nodes yK and 
zK. 

Lemma 1. The intersection of a coset xH and yK is either empty or equal to 
a coset z(H n K). 

This defines the Tanner graph of our code and therefore also its parity-check 
matrix M. Property imposes that there are no multiple edges in the graph. 
The point of this construction is that the commutation of the g^s with the 
<to's implies the orthogonality of the rows of M. Thus, the matrix M is a valid 
parity-check matrix for defining a stabilizer code. 

Proposition 1. The parity-check matrix M associated to the Tanner graph 
given by this construction has orthogonal rows. 

Proof. Given two rows Mj and Mj of M , a parity-check matrix of a stabilizer 
code, one can partition the set of qubits in two classes: qubits for which the 
corresponding entries in Mj and Mj have inner product 0, and those for which 
the entries have inner product 1. For Mj and Mj to be orthogonal, it is necessary 
and sufficient that the number of qubits of the second type is even. Equivalcntly, 
and this is how our construction is tailored, we must show that qubits of the 
second type can be paired together. 

Consider a qubit belonging to the second class; say it corresponds to the 
vertex xY\ and the rows Mi and Mj correspond to the cosets yK and zK. Since 
for this qubit the entries of Mi and Mj have inner product 1, one of these two 
rows has a w at the position of zH and the other one has a uj. Without loss of 
generality we may assume that the subgraph of the Tanner graph induced by 
xH, yK and zK is as in Fig. ^ I n other words there exist g u £ G u , g^ 6 Go 
such that xg^H D yK ^ and xg^Y\ n zK ^ 0. Let x' = xg^g^. Note that there 
exist hi , /12 in H and k\ , k2 in K such that 

y = xg u h\ki (4) 
z = xg a h 2 k 2 (5) 

Since xg^ = x'g^ 1 , using Q implies that y = x'g% /ix^i- Therefore, there is 
an edge labeled by ui between x'H and yK. Because g^g^ = g^g^ we also have 
xg a = x'g^ 1 . A similar reasoning shows that z = x' g~ 1 h 2 k2, which implies that 
there is an edge labeled by co between x'H and zK. Each qubit of the second 
class is necessarily involved in a 4-cycle with another such qubit (See Fig. EJ. 
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Figure 2: Subgraph showing that each qubit xH of the second type (involved in 
Mi with a u> and in Mj with a Q) is necessarily part of a 4-cycle with another 
qubit x'H = xg^g^U of the second type. 

From the absence of multiple edges in our Tanner graph, qubits of the sec- 
ond class can always be arranged in pairs forming the 4-cycle described above. 
Hence, < Mj, Mj >= for any i and j, and M is the parity-check matrix of a 
stabilizer code. □ 

Remark 1. For satisfying the commutation constraints, it is necessary to intro- 
duce many 4-cycles in the Tanner graph associated to stabilizer codes. More pre- 
cisely, let us define the 4-cycle graph associated to a Tanner graph as the graph 
with vertex set the qubits and with edges connecting two qubits iff they are in- 
volved in the same 4-cycle in the Tanner graph. The 4-cycle graph associated to 
our construction is a regular graph with degree at least IG^HG^UHp/jHriKI 2 . 
More generally, (a, i>)-rcgular codes, where each qubit is involved in a u gener- 
ators with a uj and a& generators with a Co, have a 4-cycle graph where each 
vertex has degree at least a^a^. The 4-cycle graph is of higher degree in our 
construction if the group or the generators are badly chosen, for instance if G 
is Abelian, or if there are commuting generators in G w or in G a that are not 
inverse of each other. 

Remark 2. A closer look at the proof shows that 4-cycles come from qubits 
which are involved in two different ways in two generators. It could be thought 
that in order to avoid these 4-cycles we just have to ensure that each qubit is in- 
volved in the same way in all the generators it belongs to. This is a bad solution. 
Assume for instance that a qubit is involved in all its generators with label uj. 
Then the single qubit error with awat this position and elsewhere generally 
belongs to the set of undetectable errors. 4-cycles are therefore unavoidable if 
we want stabilizer codes with good error-correcting capabilities. 

Example 1. We obtain a (6,12)-rcgular quantum LDPC code with the following 
choices: 



• G = PSL 2 (¥ 5 ) x PSL 2 (¥ 5 ) (PSL 2 (¥) denotes the quotient of group of 
2x2 matrices over the field F of determinant 1 by its center, that is 
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• H = {1} and K = {I, u} where u 2 = I, with it given by 




This code has block length n = 3600 and n — k = 1800 generators. By 
reducing the parity-check matrix in its standard form, see |Got97aj . we know 
that these generators are independent. The dimension of the code (that is the 
number of encoded qubits) is therefore 1800. The code is of rate 1/2. 

3.3 Construction of a (4,8)-regular quantum LDPC code 

If we want to obtain a (4, 8)-rcgular quantum LDPC code from the construction 
given previously, it turns out that we cannot avoid choosing an Abelian group 
for G. This would not be a wise choice as it would induce many unwanted bi- 
cycles. Here, we give an alternative construction for (4, 8) codes such that the 
associated 4-cyclc graph is 4-regular. In addition, we impose that each column 
of M has two entries with a u> and two with a a). This defines a quantum LDPC 
code of type ([2 W , 2 ], 8). 

Since the 4-cycle graph will be constructed as a Cayley graph, we remind 
that: 

Definition 2. For G a finite group and S C G satisfying S = S , the Cayley 
graph X(G,S) is the graph having G as vertex set and edges formed by pairs 
{x, y} such that x = gy. X(G, S) is k-regular with k = \S\. 

Our alternative construction is obtained by following a 3-step procedure. 



Step 1: construction of the 4-cycle graph. The intuition behind our 
construction is the following remark which explains how the 4-cycle graph can 
be used in order to build the Tanner graph. We notice that the subgraph of the 
4-cycle graph of a ([2 W , 2q], 8) code induced by the qubits involved in a generator 
is a 2-regular graph with 8 vertices. It is therefore either a cycle of length 8 or 
a union of cycles. We choose to construct ([2^,2^], 8) codes for which all these 
subgraphs are single cycles. Therefore, following certain cycles in the 4-cycle 
graph will reveal which qubits are involved in the associated generator. 

We obtain the 4-cycle graph in the following way. For p prime such that 
p = 1 mod 4, let ¥ p be the finite field of size p and consider 

G = { M e GL 2 (¥ P ) | (det M) 2 = ±1 }. 

Choose g + , g_ e GL2(¥ p ), such that: 
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Figure 3: Subgraphs of the 4-cycle graph showing the two types of qubits en- 
countered. Each quadrant corresponds to an 8-cycle associated with a generator 
in which the qubit has a non-zero entry. The w's and u) , s of each quadrant rep- 
resent the value of the entry for the corresponding generator obtained in the 
labeling step. 

• det g + = ±1 and dct g_ = ±i 

• G is generated by the set 

S = {g+, .g+\ g~, gZ 1 }, 
satisfying (g+gZ 1 ) 4 = (g-g+) 4 = I 

The graph X(G,S) is 4-regular and has 4p(p 2 — 1) vertices. This defines the 
4-cycle graph. 

Step 2: Construction of a (4, 8)-regular graph. It is easy to check that 
any qubit is involved in four cycles of length 8 corresponding respectively to the 
relations (g+g-) 4 = I, (g-gZ 1 ) 4 = I, (g-g+) 4 = I, (gZ 1 g+) i = I. This gives the 
4 generators in which this qubit is involved. The (4, 8)-regular graph is then 
obtained by putting an edge between each qubit and the generators it belongs 
to. 

Step 3: Edge labeling. For the (4, 8)-regular graph constructed in the previ- 
ous step to be the Tanner graph associated to a quantum LDPC code, we must 
now label the edges in a way that commutation relations are satisfied. This can 
be done in many different ways. We give one way of performing this task which 
is the one used for the example considered in the next section. 

Let us first notice there is a natural bipartition of G, and hence of the qubits. 
in two classes {g £ G, det g = ±1} and {g G G, det g = ±i}. The edges leaving a 
qubit of the first class are labeled as follows. The two edges linking the qubit to 
the generators corresponding to the cycles (g+g-) 4 = I and (g~g+) 4 = I get the 
label u; the two other edges receive the label u. The edges leaving the qubits 
of the second class are labeled in the opposite way: the two edges linking such 
qubit to the generators of type (g + g^) 4 = I and (g-g + ) 4 = I get the label w, 
whereas the two other edges receive the label w (see FigJSJ. 

It is then straightforward to check that this labeling defines commuting 
generators. 
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Remark 3. It should be noted that the (4, 8)-regular quantum LDPC code ob- 
tained with this construction looks in many ways like a (classical) cycle graph. 
In particular the minimum weight of an undetectable error (in other words the 
minimum distance of the quantum code) is at most logarithmic in the number 
of qubits. This can be seen by considering the subgraph of the Tanner graph 
consisting in taking only edges with label u>. This graph is (2, 4)-regular. It has 
therefore a cycle of logarithmic size in the number of vertices. It is straightfor- 
ward to check that the error consisting in putting aw at qubits belonging to 
this cycle and O's elsewhere is an undetectable error. 

Example 2. We obtain a (4, 8) quantum LDPC code with the following choices: 
• p= 13; 
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It can be checked readily that n = 8736 and k = 4370. 

4 Results 

We present in Fig. 0] simulation results of two quantum LDPC codes of rate 
1/2 on the depolarizing channel. We plot the block error probability against 
the probability that there is an error of type X,Y or Z. The first code is a 
(4, 8)-regular LDPC code of length 8736 and the second one is a (6, 12)-regular 
LDPC code of length 3600. Despite the fact that the latter code is smaller, it 
behaves much better with respect to the iterative error estimation algorithm. 

5 Conclusion 

One of the drawbacks of the quantum LDPC codes constructed in this article 
is that they have many cycles of size 4. However, it should be emphasized 
that this is not due to the particular construction chosen here, but that it is a 
characteristic of all stabilizer codes. This affects iterative decoding performances 
when the usual SUM-PRODUCT or MIN-SUM algorithm is used. It would be 
interesting to study how variants of this algorithm (see |YFW04a] for instance) 
would overcome this problem. In light of the fact that well chosen (classical) 
irregular LDPC codes perform much better than their regular counterpart, it 
would also be interesting to study whether our construction could be generalized 
to yield irregular LDPC codes. 

Finally, we would like to point out that quantum LDPC codes might be good 
candidates for constructing fault-tolerant architectures. First, we hope that the 
minimum distance of these codes increases linearly with the block size, as it is 
the case for most classical LDPC codes. This would warrant that any finite 
weight error can be corrected for sufficiently large block sizes. Second, the rate 
of such codes does not decrease to zero, thus possibly improving the overhead 
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Figure 4: Numerical simulations of the performance of a (4,8) and a (6,12)- 
regular quantum LDPC codes. The error estimation algorithm is the syndrome 
version of MIN-SUM. The error model is the depolarizing channel which acts 
on one-qubit density matrices as: p — > (1 — p)p + | (XpX + YpY + ZpZ). 

requirements over schemes employing concatenation or toric codes |DKLP02a) . 
Finally, and by definition, measurements involved in the determination of the 
syndrome for quantum LDPC codes is of fixed gate complexity, making it less 
prone to produce erroneous syndromes than concatenated codes. If these are 
potential advantages of using quantum LDPC codes for fault-tolerance, the 
issue of error propagation in a circuit manipulating encoded information needs 
to be addressed for them to become of practical interest. We chose to postpone 
discussion of these issues to forthcoming publications. 

This work was supported in part by ACI Securitc Informatiquc — Rcseaux 
Quantiqucs. H.O. would like to thank D. Poulin for stimulating discussions and 
comments on an earlier version of the manuscript. 
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